rqtonmlkjihgfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

This domain is classified as an elevated-risk generic phishing threat targeting credentials associated with event management platforms. Analysis indicates the subdomain rqtonmlkjihgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com mimics legitimate conference registration systems, a common tactic in credential harvesting campaigns. The threat type is explicitly categorized as generic_phishing, suggesting broad targeting of users through deceptive login portals or payment submission forms. Infrastructure analysis reveals the domain was registered on February 21, 2026, through GoDaddy.com, LLC, and resolves to the IP address 143.198.30.146. Detection metrics show the domain appears on three security blocklists, while VirusTotal reports 2 out of 95 security vendors flagging it as malicious. The Gridinsoft trust score is 0 out of 100, further corroborating its high-risk classification. Technologies detected on the domain include Stripe integration, HSTS, and HTTP/3, which may be leveraged to enhance the appearance of legitimacy while facilitating unauthorized data collection. Mitigation against this generic phishing threat involves immediate blocking of the domain and its associated IP address (143.198.30.146) at the network perimeter. Organizations should implement email filtering rules to quarantine messages containing links to the subdomain or its parent domain. Users should be advised to verify the authenticity of event registration portals through official channels before entering credentials or payment details. Monitoring for similar subdomain patterns (e.g., randomized prefixes) under the fullsailevents.com namespace is recommended to preemptively identify related threats.